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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims : 

1.-16. (Canceled) 

17, (Currently amended) An access control system in which a plurality of 
storage devices for storing information resources and access controllers for 
controlling accesses to the information resources stored in the storage devices are 
connected with a network, each of the access controllers having an access control 
list on which access right to each information resource stored in the storage devices 
is recorded, and each of the access controllers having an access prohibition list on 
which access prohibited users are recorded who are prohibited from accessing any 
information resource stored in the storage devices, each access controller 
comprising: 

an access restriction module configured to restrict access to each information 

resource stored in a storage device and listed on the access control list of the access 
controller that records access right to each information resource: and 

an access interception module configured to restrict the access by reference 

to the access prohibition list of the access controller which records user information 
of access prohibited users, prior to the access control list: 

; at least one of the access controllers having the updated access prohibition 

list further comprising a distribution module configured to send out the user 
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information or the updated access prohibition list to the other access controllers in 

response to the update; and 

the other access controllers further comprising a list update module 

configured to receive the user information or the updated access prohibition list and 
to update the access prohibition list thereof to include the received user information 
or updated access prohibition lis tA n accoss control system i n aocordanoo with c l aim 

wherein the distribution module of each access controller sends out the user 
information or the updated prohibition list to a predetermined other one of the access 
controllers, thereby transmitting the user information or the updated prohibition list 
from one access controller to another. 

18. -28. (Canceled) 
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